Examkin

Question

Difficulty: HardSecurity Governance Structures and Policy Frameworks

Following a cloud security assessment, a Chief Risk Officer directs the security team to enforce consistent security configurations across all newly provisioned virtual machine instances. The engineering team requires a governance document that specifies the mandatory, platform-specific minimum security settings—such as disabled default accounts, mandatory audit logging parameters, and specific host firewall rules—that every instance must satisfy before being joined to the enterprise network, while allowing technical teams to determine their own specific deployment scripts. Which of the following governance document types should the security team establish to satisfy this requirement?

  1. A
    Security guideline document
  2. B
    Organizational security policy
  3. Security baseline documentAnswer
  4. D
    Standard operating procedure

Answer

Security baseline document
A security baseline document defines mandatory minimum security configuration settings for a specific technology, operating system, or platform. In an enterprise governance framework, baselines ensure that all systems meet a required minimum security state prior to network deployment, while leaving exact implementation scripts and methods to operational teams.

Step-by-Step Solution

1
Analyze the scenario requirement
Identified the need for a mandatory, platform-specific document establishing minimum configuration rules (e.g., firewall settings, disabled accounts, audit parameters) for virtual machines.
Governance documents are categorized based on their level of authority, scope, and technical granularity.
2
Differentiate governance document levels within security framework hierarchy
Recognized that high-level directives represent policies, step-by-step execution workflows represent procedures, discretionary recommendations represent guidelines, and mandatory system-level configuration thresholds represent baselines.
A baseline acts as a compulsory minimum build standard for a specific operating system or software deployment.
3
Select the governance document matching mandatory minimum technical settings
Selected the security baseline document as the correct instrument.
Only a security baseline establishes mandatory minimum security configurations that system builds must satisfy prior to production onboarding.

Key Concept

Security Governance Document Hierarchy (Baselines vs. Policies, Standards, Guidelines, and Procedures)
Estimated Time:1m 30s
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic